Advisory Catalog

pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules

Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks

GPT-Pilot contains a command injection vulnerability in the Executor.run() method

python-liquid: Absolute paths escape filesystem loader search path

oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS)

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

urllib3: Sensitive headers forwarded across origins in proxied low-level redirects

GuardDog has a blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration

GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content

Streamlink has an arbitrary local file read via file:// URI in HLS and DASH

Dockerfile command injection via envs[*].name in bentofile.yaml (sibling fix-bypass of CVE-2026-33744 and CVE-2026-35043)

BentoML Dockerfile command injection via docker.base_image (sister of pending GHSA-w2pm-x38x-jp44 / CVE-2026-33744 / CVE-2026-35043)

Open WebUI has inconsistent authorization controls within memories API

Open WebUI's Improper Authorization in Standard Channels Allows Message Updates with Read Permission

Open WebUI's Insecure Message Access Breaks Authorization

Open WebUI Arbitrary File Write, Delete via Path Traversal

Open WebUI has a CORS misconfiguration and session validation issue

Apache Airflow Providers OpenSearch: OpenSearch task-log handler leaks credentials embedded in the host URL

Apache Airflow Providers Elasticsearch: Elasticsearch task-log handlers leak credentials embedded in the host URL

Sentry: Superusers can execute arbitrary commands by injecting malicious pickle-serialized objects through audit log entry data parameter

A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid File Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has

OSGeo gdal has a heap-based buffer overflow

Mistune Heading ID Attribute has Injection XSS

Mistune has XSS via unescaped figclass/figwidth in Figure directive

Mistune Math Plugin has an XSS Escape Bypass

GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath

eml_parser has recursion DoS via nested message/rfc822 attachments

LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists

Open WebUI Vulnerable to Arbitrary File Upload and Path Traversal

Open WebUI has Improper Authorization Control

Open WebUI has stored XSS in Excel file preview

Open WebUI has Stored XSS in Pending User Overlay via Incorrect DOMPurify Application Order

banks has Critical Remote Code Execution (RCE) via Jinja2 SSTI

Wagtail has improper permission handling when copying pages

Wagtail has improper restriction handling on Documents and Images API

Wagtail has improper permission handling when deleting form submissions

Wagtail has improper permission handling when viewing page history